Skip to content

CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2021-4072

Cross-site Scripting (XSS) - Stored in elgg/elgg

Read JSON ↗CVE.org ↗

Status: Published
Published: 2021-12-24
Updated: 2024-08-03
Assigning organization: @huntrdev

Description

elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

elgg elgg/elgg

unspecified to < 3.3.24affected

References